[global]
        netbios name = lighthouse
        realm = DOMAIN.TLD
        server role = active directory domain controller
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
        workgroup = DOMAIN
        idmap_ldb:use rfc2307  = yes
        # logging
        # logging = syslog file
        logging = file
        max log size = 2000
        log level = 2 dns:10 auth_audit:0 auth_json_audit:0 msdfs:3 registry:3
        debug class = yes
        debug prefix timestamp = yes
        # disable printing
        disable spoolss = yes
        printcap name = /dev/null
        load printers = no
        printing = bsd

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/domain.tld/scripts
        read only = No
[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No
        acl_xattr:ignore system acls = yes

[2018/05/25 07:33:55.378073,  2]   Calling samba_kcc script
[2018/05/25 07:33:55.898790,  2]   dnsserver: Found DNS zone .
[2018/05/25 07:33:55.899059,  2]   dnsserver: Found DNS zone domain.tld
[2018/05/25 07:33:55.899175,  2]   dnsserver: Found DNS zone 10.168.192.in-addr.arpa
[2018/05/25 07:33:55.900674,  2]   dnsserver: Found DNS zone _msdcs.domain.tld
[2018/05/25 07:33:55.903646,  0] [2018/05/25 07:38:55.447569,  2]   Calling samba_kcc script
[2018/05/25 07:43:55.570195,  2]   Calling samba_kcc script
  dnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone operation IsSigneddnsserver: Found DNS zone .
[2018/05/25 07:44:38.555366,  2]   dnsserver: Found DNS zone domain.tld
[2018/05/25 07:44:38.555528,  2]   dnsserver: Found DNS zone 10.168.192.in-addr.arpa
[2018/05/25 07:44:38.556769,  2]   dnsserver: Found DNS zone _msdcs.domain.tld
[2018/05/25 07:44:38.559655,  0] [2018/05/25 07:48:55.692918,  2]   Calling samba_kcc script
[2018/05/25 07:53:55.810061,  2]   Calling samba_kcc script
[2018/05/25 07:58:55.932487,  2]   Calling samba_kcc script

[2018/05/25 08:03:56.047620,  2]   Calling samba_kcc script
  dnsserver: Invalid zone operation IsSigneddnsserver: Found DNS zone .
[2018/05/25 08:08:33.475465,  2]   dnsserver: Found DNS zone domain.tld
[2018/05/25 08:08:33.475667,  2]   dnsserver: Found DNS zone 10.168.192.in-addr.arpa
[2018/05/25 08:08:33.476984,  2]   dnsserver: Found DNS zone _msdcs.domain.tld
[2018/05/25 08:08:33.480365,  0] [2018/05/25 08:08:56.170145,  2]   Calling samba_kcc script

[2018/05/25 07:30:12.791556,  2]   svcctl_set_secdesc: Could not open SYSTEMCurrentControlSetServicesDNSSecurity -                                                           WERR_FILE_NOT_FOUND

samba_dnsupdate --fail-immediately --all-names --verbose --use-nsupdate